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CLAIMS 

1, A method for generating an authentication rating for an entity, comprising: 
receiving a message identifying an entity, which message requires authentication of said 

5 entity; 

receiving data from each of a plurality of sources, said data representing at least a rating 
for said authentication according to a criteria; 

analysing said received data using a set of predefined fuzzy inferencing rules so as to 
calculate an authentication rating for said entity 

10 

2, A method according to claim 1, wherein said data from each source comprise 
data representing a trust rating for said entity and data representing an associated 
confidence rating. 

15 3. A method according to claim 2, wherein the analysis comprises: 

combining said plurality of data representing a trust rating using a first predefined 
set of fuzzy inferencing rules so as to calculate a combined trust rating; 

combining said plurality of confidence rating data using a second predefined set 
of fuzzy inferencing rules to calculate a combined confidence rating; 
20 and then analysing said combined trust rating and said combined confidence 

rating using a third predefined set of fuzzy inferencing rules so as to calculate said 
authentication rating. 

4. A method according to any preceding claim, where one of the sources is a local 
25 store for storing previous case data relating to a user. 

5. A system for generating an authentication rating for an entity, comprising: 
receiving means for receiving a message identifying an entity, which message 

requires identification of said entity; 
30 the receiving means being further arranged to receive in use from each of a 

plurality of sources data representing a rating of said entity according to a criteria; and 

processing means arranged in use to analyse said received data using a set of 
predefined fuzzy inferencing rules so as to calculate an authentication rating for said 
entity. 
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6. A system according to claim 5, said processing means being further arranged to 
compare said authentication rating with a predefined policy so as to determine whether to 
issue an authenticate signal. 

5 7. A computer program or suite of programs executable by a computer system to 
cause the system to perform the method of any of claims 1 to 4. 

8. A modulated carrier signal incorporating data corresponding to the computer . 
program or at least one of the suite of programs of claim 7. ~ 

10 

9. A computer readable storage medium storing a computer program or at least one 
of a suite of computer programs as claimed in claim 7. 



